PT-2013-2053 · Microsoft · Windows Forms+1

Published 2013-01-09 · Updated 2023-12-07 · CVE-2013-0002

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.0 SP3 through 4.5

Description A buffer overflow issue in the Windows Forms component allows remote attackers to execute arbitrary code via a crafted XAML browser application or a .NET Framework application. This is due to improper counting of objects during a memory copy operation. An elevation of privilege vulnerability also exists in the way a Windows Forms method validates the number of objects in memory before copying those objects into an array. If exploited, an attacker could take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft .NET Framework versions 1.0 SP3 through 4.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-0002

ZDI-13-005

Affected Products

.Net Framework

Windows Forms

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2013-0002 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-13-005 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0002 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0002 · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms13-004 · Note
• https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16343 · Note
• http://us-cert.gov/cas/techalerts/TA13-008A.html · Note